NetSupport Software vulnerabilities
We track 3 vulnerabilities in NetSupport Software products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
Latest NetSupport Software vulnerabilities
- 8.7 High severity
Manager: Improper Limitation of a Pathname to a Restricted Directory
NetSupport Manager < 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write file
- 8.4 High severity
Manager: Storing Passwords in a Recoverable Format
NetSupport Manager < 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client con
- 8.7 High severity
Manager: Improper Neutralization of Special Elements used in an SQL Command
NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By